Login Request a demo
Medium severity · published Jun 9, 2026
CVE-2026-0410
Insufficient input validation in certain NETGEAR routers
4.5
CVSS
0.2%
EPSS
No
On KEV
Description
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
R7
R7000 · NETGEAR
before V1.0.11.216 · source: vendor
RA
RAX20 · NETGEAR
before V1.0.18.144 · source: vendor
RA
RAX35v2 · NETGEAR
before V1.0.16.132 · source: vendor
RA
RAX41 · NETGEAR
before V1.0.16.132 · source: vendor
RA
RAX41v2 · NETGEAR
before V1.1.4.28 · source: vendor
RA
RAX42 · NETGEAR
before V1.0.16.132 · source: vendor
RA
RAX42v2 · NETGEAR
before V1.1.4.28 · source: vendor
RA
RAX43 · NETGEAR
before V1.0.16.132 · source: vendor
RA
RAX43v2 · NETGEAR
before V1.1.4.28 · source: vendor
RA
RAX45 · NETGEAR
before V1.0.16.132 · source: vendor
RA
RAX49S · NETGEAR
before V1.1.4.28 · source: vendor
RA
RAX50 · NETGEAR
before V1.0.16.132 · source: vendor
Affected product
R7
R7000
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0410
Vendor Advisory
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Product
https://www.netgear.com/support/product/r7000/
Product
https://www.netgear.com/support/product/rax20/
Product
https://www.netgear.com/support/product/rax35v2/
Product
https://www.netgear.com/support/product/rax41/
Product
https://www.netgear.com/support/product/rax41v2/
More from R7000
4.9
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
4.5
CVE-2026-9218
Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access
4.5
CVE-2026-9214
Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.
4.5
CVE-2026-0417
Insufficient input validation in certain NETGEAR routers
4.5
CVE-2026-9210
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router